New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps | allinfosecnews.com

Feb. 7, 2022, 3:30 a.m. | noreply@blogger.com (Ravie Lakshmanan)

The Hacker News thehackernews.com

Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as passwords and API keys.
The flaw, tagged as CVE-2022-24348 (CVSS score: 7.7), affects all versions and has been addressed in versions 2.3.0, 2.2.4, and 2.1.9. Cloud security firm

apps argo argo cd bug cd hackers kubernetes

More from thehackernews.com / The Hacker News

How Attackers Can Own a Business Without Touching the Endpoint 2 hours ago | thehackernews.com

apps attack attackers attack techniques +14

Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers 2 hours ago | thehackernews.com

akira akira ransomware america businesses +19

Hackers Target Middle East Governments with Evasive "CR4T" Backdoor 7 hours ago | thehackernews.com

backdoor campaign cybersecurity cybersecurity company +15

OfflRouter Malware Evades Detection in Ukraine for Almost a Decade 23 hours ago | thehackernews.com

analysis called cisco cisco talos +22

FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor 23 hours ago | thehackernews.com

auto auto industry automotive automotive industry +17

Recover from Ransomware in 5 Minutes—We will Teach You How! 1 day, 2 hours ago | thehackernews.com

attack back can cdp +21

New Android Trojan 'SoumniBot' Evades Detection with Clever Tricks 1 day, 3 hours ago | thehackernews.com

analysis android android trojan called +16

How to Conduct Advanced Static Analysis in a Malware Sandbox 1 day, 3 hours ago | thehackernews.com

advanced analysis can dynamic +17

Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide 1 day, 3 hours ago | thehackernews.com

arrested as-a-service called crackdown +14

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Information Security Manager & ISSO

@ Federal Reserve System | Minneapolis, MN

View on infosec-jobs.com

Forensic Lead

@ Arete | Hyderabad

View on infosec-jobs.com

Lead Security Risk Analyst (GRC)

@ Justworks, Inc. | New York City

View on infosec-jobs.com

Consultant Senior en Gestion de Crise Cyber et Continuité d’Activité H/F

@ Hifield | Sèvres, France

View on infosec-jobs.com